CVE-2011-4103

emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary…

published October 27, 2014

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02430 · 84.0th percentile
Published
2014-10-27T01:00Z
EPSS history
Timeline
  • 27 OCT 01:00Z
    emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary…
    cvelistv5